FooEvents for WooCommerce vulnerabilities

2 known vulnerabilities in FooEvents for WooCommerce from FooEvents. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  FooEvents for WooCommerce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-69045Jan 22, 2026FooEvents

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FooEvents FooEvents for WooCommerce fooevents allows SQL Injection.This issue affects FooEvents for WooCommerce: from n/a through <= 1.20.4.

• 7.1 High severity

  FooEvents for WooCommerce: Improper Authorization

  CVE-2024-6000Jun 15, 2024FooEvents

  The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability setting on the 'display_ticket_themes_page' function in versions up to, and including, 1.19.20. This makes it possible for aut